Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft
File: Ok9ILhJcCNuDBRbVGkot8eCqiso.mft (raw, json)
Hash identifier: y5bPK+LbycS1TUT2bmbEdU9FyS3Y5hPDCz4+CbCZnNU=
Subject key identifier: 84:88:2B:FE:F6:1D:81:AD:13:F0:17:1B:3B:D2:60:8E:A6:A2:16:6D
Authority key identifier: 3A:4F:48:2E:12:5C:08:DB:83:05:16:D5:1A:4A:2D:F1:E0:AA:8A:CA
Certificate issuer: /CN=A918C158/serialNumber=3A4F482E125C08DB830516D51A4A2DF1E0AA8ACA
Certificate serial: 0A14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft
Manifest number: 0A0F
Signing time: Thu 30 Jan 2025 19:55:30 +0000
Manifest this update: Thu 30 Jan 2025 19:55:30 +0000
Manifest next update: Thu 06 Feb 2025 19:55:30 +0000
Files and hashes: 1: Ok9ILhJcCNuDBRbVGkot8eCqiso.crl (hash: YeXSDGN3YZYLGmABg3VuoayeTGCz1nQo6ExwIEZutnQ=)
2: F25A6266796A11EB82E0EE24C4F9AE02.roa (hash: aNxxH/k6H9pUK4+Yh6tMJ5W3Dxa/fkGC+OopIVqyBEI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2580 (0xa14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C158/serialNumber=3A4F482E125C08DB830516D51A4A2DF1E0AA8ACA
Validity
Not Before: Jan 30 19:55:30 2025 GMT
Not After : Feb 6 19:55:30 2025 GMT
Subject: CN=679bd932-c14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:8b:44:fd:91:7b:b6:63:54:ac:99:5c:3c:
77:07:c3:b2:4e:7c:c5:98:75:77:40:43:28:ed:e5:
52:73:e6:cc:16:3b:c6:39:67:06:69:05:2d:ac:65:
14:8f:82:2c:38:db:e4:68:57:2e:c0:5e:ba:7f:6b:
95:84:7f:16:a6:9a:8a:09:38:8f:c2:81:ce:33:dd:
bb:93:38:4b:a6:cd:75:9b:f7:f3:76:08:79:1b:f6:
74:e7:d4:7a:e4:ba:d3:9c:7b:9f:cf:78:c9:7c:6f:
06:ab:3e:ba:97:bf:91:60:6b:6d:e9:87:33:4a:b8:
5b:5f:c0:a5:78:5f:0c:1f:7e:0b:3e:56:12:6d:d1:
57:28:2c:bf:9a:19:b5:4f:a8:04:2e:74:96:75:55:
55:22:61:47:fc:2b:da:d1:56:a1:cd:d3:2d:20:16:
93:76:01:32:40:2b:94:d6:cd:30:9b:13:e4:fd:32:
44:d6:fe:2e:27:df:8f:07:3e:28:c3:47:07:6b:70:
5b:7a:ad:9c:4b:37:a1:00:ef:65:ce:e5:87:fa:86:
7d:70:3e:0b:15:00:aa:75:4d:d5:7f:c0:43:90:01:
1e:ab:01:aa:c9:5b:f2:d6:7d:2a:7a:02:7e:29:e7:
d5:83:82:80:c0:c3:2a:1f:79:0e:a6:f3:71:ce:c8:
a4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:88:2B:FE:F6:1D:81:AD:13:F0:17:1B:3B:D2:60:8E:A6:A2:16:6D
X509v3 Authority Key Identifier:
keyid:3A:4F:48:2E:12:5C:08:DB:83:05:16:D5:1A:4A:2D:F1:E0:AA:8A:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:12:2c:9a:e6:b5:f7:36:12:f5:c6:3d:4e:fc:46:c1:b5:80:
6e:68:24:db:96:94:63:19:3e:d7:f5:27:09:4d:50:2e:5b:f2:
ad:bf:71:ec:3c:dc:de:9e:53:33:c5:80:3d:bd:85:d0:dd:54:
e2:06:e8:0a:23:89:cf:db:07:7d:c5:ea:78:20:29:21:10:aa:
3f:3c:2a:c6:03:62:79:48:51:66:12:78:0b:58:59:3c:36:fb:
3d:f3:d1:d1:41:12:34:e4:8b:1a:65:68:a0:0f:c2:fb:ef:e1:
87:03:82:e6:f0:28:ce:0c:30:ea:b3:60:35:2e:52:2a:ba:0f:
c4:41:3a:50:c0:70:57:68:d3:88:62:43:58:36:bd:9f:98:68:
89:71:f3:85:28:e0:4b:eb:90:51:1b:77:7d:12:39:bb:bc:42:
82:b6:c6:d9:54:97:b6:d5:be:54:82:29:2f:92:cf:28:88:0d:
93:d2:f0:ed:d2:b5:ff:92:3d:71:df:16:ae:24:04:cb:24:ee:
a6:28:ad:16:b4:92:d4:26:63:8d:f7:ef:ce:13:45:0c:cb:88:
17:8c:a8:55:80:5b:d4:47:9a:71:b6:1f:18:fe:74:6a:30:5e:
f4:3c:df:ea:69:6b:20:7c:c3:97:e2:f7:23:90:19:a9:3a:ad:
c8:20:1c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:55:49 2025 by rpki-client